Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/0I2wjhM4pXmtN4lTX6c6XlRRH_E.mft
File: 0I2wjhM4pXmtN4lTX6c6XlRRH_E.mft (raw, json)
Hash identifier: LK9WXo6pYHJ7aN1eLniU4TQWNGoWuXMsYCn/oj/6ehs=
Subject key identifier: 6B:17:E5:55:87:27:1D:D2:AB:D8:78:01:A5:19:93:32:CA:DB:4E:E8
Authority key identifier: D0:8D:B0:8E:13:38:A5:79:AD:37:89:53:5F:A7:3A:5E:54:51:1F:F1
Certificate issuer: /CN=d08db08e1338a579ad3789535fa73a5e54511ff1
Certificate serial: 0194BC7291E0BDBBD83F238BD7DE261B0837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2wjhM4pXmtN4lTX6c6XlRRH_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/0I2wjhM4pXmtN4lTX6c6XlRRH_E.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:12 +0000
Manifest this update: Fri 31 Jan 2025 13:00:12 +0000
Manifest next update: Sat 01 Feb 2025 13:00:12 +0000
Files and hashes: 1: 0I2wjhM4pXmtN4lTX6c6XlRRH_E.crl (hash: cR9LrZF0tx6CvrQnCGKmtglt0Szt6PC5Eq3qwo7aUFA=)
2: KzisFaAGCo_M29Hpg-XLavrmucI.roa (hash: wKhDmEmJvmyWEhFCmOYqNzdMcRmXiu+WrBZbcpRXXA8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:91:e0:bd:bb:d8:3f:23:8b:d7:de:26:1b:08:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08db08e1338a579ad3789535fa73a5e54511ff1
Validity
Not Before: Jan 31 13:00:12 2025 GMT
Not After : Feb 1 13:00:12 2025 GMT
Subject: CN=6b17e55587271dd2abd87801a5199332cadb4ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7c:2f:10:77:93:1a:40:7d:2a:b9:37:60:28:
2e:85:42:6c:48:2d:f0:0b:2d:d4:92:29:0b:38:9c:
4e:d4:14:1e:06:8b:2b:74:0b:93:43:13:71:cb:33:
a0:b8:ec:ea:ab:e0:c3:5c:bf:0c:18:71:26:3a:fb:
ec:76:56:85:47:3e:dc:09:12:ad:e9:a2:ca:48:0d:
40:af:25:99:68:c5:cd:be:fd:25:a1:66:0c:21:10:
40:6a:1f:ab:e5:58:ec:36:a5:c6:1e:80:28:01:12:
1e:4f:7d:c8:03:6a:b7:53:46:5c:22:61:b7:54:2e:
9d:29:8f:f3:6b:43:0a:cd:2d:c9:06:f6:33:ad:ad:
b7:40:a2:f9:69:af:7b:56:51:91:71:f3:b9:2a:17:
ce:36:8f:e2:ee:e6:be:31:4c:35:d9:b7:55:0a:89:
3b:be:6e:71:5d:cb:5a:9a:4b:f6:d4:a2:3e:3d:8c:
c3:51:ea:da:a9:b3:51:d4:58:f9:6b:19:64:cc:dd:
91:00:18:4f:3c:50:ce:91:8d:d4:10:8d:af:f3:ac:
5b:6c:e7:36:c8:ff:4a:de:02:ef:b5:b4:84:ff:e2:
ef:47:f5:69:53:28:a4:fd:15:dd:c6:e7:19:ba:3f:
8f:b2:78:76:29:fe:ce:dd:e1:df:2b:a0:db:c0:52:
50:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:17:E5:55:87:27:1D:D2:AB:D8:78:01:A5:19:93:32:CA:DB:4E:E8
X509v3 Authority Key Identifier:
keyid:D0:8D:B0:8E:13:38:A5:79:AD:37:89:53:5F:A7:3A:5E:54:51:1F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2wjhM4pXmtN4lTX6c6XlRRH_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/0I2wjhM4pXmtN4lTX6c6XlRRH_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/0I2wjhM4pXmtN4lTX6c6XlRRH_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ce:1f:07:69:bb:1c:8d:34:a6:b6:a3:06:e7:10:b6:e6:45:
cc:21:b4:ac:06:ec:bc:02:28:2e:99:fd:9c:af:bc:54:0e:c6:
42:57:c8:7e:e3:4f:7d:c0:63:d8:ba:e7:42:bf:cc:6b:c4:f6:
73:e8:3b:42:b4:f8:81:af:23:a3:78:f0:ec:d6:67:08:c0:e7:
1a:1d:bf:0f:93:64:8c:2a:05:b0:33:fc:f2:ff:69:1e:22:54:
02:0d:f9:48:73:81:dd:23:48:c1:90:be:82:6f:e2:ec:0b:58:
a6:3e:51:66:38:a4:fe:db:21:e0:47:f4:f9:b6:e2:66:b8:30:
bc:dd:7d:db:58:ff:90:39:fb:7f:14:14:66:8c:61:1b:3b:d3:
cf:39:4a:94:64:ad:dc:75:a8:22:f7:7d:8b:41:54:f0:3a:44:
2d:6a:cc:23:14:5c:32:df:ab:78:a1:ac:3f:49:77:a4:4b:ef:
a1:7a:0a:3d:fc:e7:5d:49:e6:42:82:a5:e2:e7:90:ec:64:e3:
24:58:0a:f5:e8:36:2e:93:15:bb:32:63:7b:cd:b3:10:fb:99:
27:f3:00:76:20:ad:d1:0b:b2:d3:00:99:65:5d:48:4e:d8:5f:
71:55:f7:2b:32:d3:52:48:37:39:3f:60:17:ec:ca:35:de:9e:
06:4e:37:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:08 2025 by rpki-client